Static task
static1
Behavioral task
behavioral1
Sample
2ee3676ec6ecf7f4e29bc4dd654bdb7f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ee3676ec6ecf7f4e29bc4dd654bdb7f_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2ee3676ec6ecf7f4e29bc4dd654bdb7f_JaffaCakes118
-
Size
100KB
-
MD5
2ee3676ec6ecf7f4e29bc4dd654bdb7f
-
SHA1
244e6111e6ca96e46040cc02363a9c200ca6f11f
-
SHA256
7335a37cf756ddcc961c69705d29e32d335070449765084aa181a565497cba8c
-
SHA512
ebe1802b125a1b5604b13887dc5a7b2e7133671af7c579227ff964e088df6c89c5826cb357785c7f7c1076d2df9647953af60eb8f58584ea6b83ac1478c915f6
-
SSDEEP
3072:X9w/1YEL9ZTlGryox94G5RYkUhPpHMHchnJbMgKq0I:QOE/srNx94SY1Pd4CnugKq0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ee3676ec6ecf7f4e29bc4dd654bdb7f_JaffaCakes118
Files
-
2ee3676ec6ecf7f4e29bc4dd654bdb7f_JaffaCakes118.dll windows:4 windows x86 arch:x86
a4827fdff8aa5f0d8176c948ceb93964
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FindNextVolumeA
GenerateConsoleCtrlEvent
GetUserDefaultUILanguage
SignalObjectAndWait
GetACP
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
data Size: 8KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ